McDonald’s Indonesia exposed more than 40 million records.